doc-exports/docs/geminidb/umn/nosql_02_0011.html

Configuring Security Group Rules

Scenarios

The default security group rule allows all outgoing data packets. ECSs and GeminiDB Cassandra instances in the same security group can access each other. After a security group is created, you can create different rules for that security group, which allows you to control access to the GeminiDB Cassandra instances that in it.

This section describes how to create a security group to enable specific IP addresses and ports to access GeminiDB Cassandra instances.

Precautions

• By default, you can create up to 500 security group rules. However, too many rules increase network latency for initial access, so it is recommended that you add no more than 50 rules for each security group.
• To access a GeminiDB Cassandra instance from resources outside the security group, you need to configure an inbound rule to allow access to the GeminiDB Cassandra instance.

Procedure

1. Log in to the management console.
2. Click in the upper left corner and select a region and a project.
3. Click Service List. Under Network, click Virtual Private Cloud.
4. In the navigation pane on the left, choose Access Control > Security Groups.
5. On the Security Groups page, click the security group name.
6. On the Inbound Rules tab, click Add Rule. In the displayed Add Inbound Rule dialog box, set required parameters to add inbound rules. On the Outbound Rules tab, click Add Rule. In the displayed Add Outbound Rule dialog box, set required parameters to add outbound rules.
7. In the displayed dialog box, set required parameters.
8. Click OK.

Parent topic: Connecting to a GeminiDB Cassandra Instance Over Public Networks